Since authentication is handled via your university’s Single Sign-On (SSO), your account benefits from the security measures of your university (including two-factor authentication if enabled there).

In addition, you can take the following steps within GitLab:

Use SSH keys for Git operations

SSH keys allow secure, password-free access when pushing and pulling. You can add your public key under “User Settings” > “SSH Keys”.

Manage Personal Access Tokens

If you use the GitLab API or CI/CD, create Personal Access Tokens with the minimum required scopes and set an expiration date. Revoke tokens you no longer need under “User Settings” > “Access Tokens”.

Review active sessions

Under “User Settings” > “Active Sessions” you can see all devices currently logged in and revoke sessions you do not recognize.